fix(csp): askem uses multiple src-endpoints

LIIKUNTA-757.

At least in prod mode, it seems the Askem is also using
https://data.reactandshare.com to download scripts.

Author: nikomakela

next.base.config.mjs

@@ -159,7 +159,7 @@ const nextBaseConfig = ({
       // Base CSP directives
       const cspDirectives = [
         "default-src 'self'",
-        `script-src 'self' ${isDevelopment ? "'unsafe-eval'" : ''} https://webanalytics.digiaiiris.com https://cdn.reactandshare.com *.youtube.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.gstatic.com`,
+        `script-src 'self' ${isDevelopment ? "'unsafe-eval'" : ''} https://webanalytics.digiaiiris.com *.reactandshare.com *.youtube.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.gstatic.com`,
         "style-src 'self' 'unsafe-inline' https://cdn.reactandshare.com",
         "img-src * 'self' data: https:",
         "font-src 'self' *.hel.fi *.hel.ninja fonts.gstatic.com https://cdn.reactandshare.com",